← Back to Keepface

Privacy Policy

Effective: April 30, 2026

This Privacy Policy explains how Keepface Global, Inc. ("Keepface", "we", "us", or "our"), a Delaware corporation, collects, uses, shares, and protects personal data when you use the Keepface marketplace, websites, mobile applications, and related services (the "Service"). It should be read together with our Terms & Conditions and User Agreement.

1. Who We Are

Keepface Global, Inc. is the data controller for personal data processed through the Service. Our registered office is at 1145 Amarillo Avenue, Palo Alto, CA 94303, USA. We operate offices in Baku (Azerbaijan), Antalya (Türkiye), Dubai (UAE), and Palo Alto (USA). For privacy questions, contact us at info@keepface.com.

2. The Data We Collect

2.1 Account & Workspace data

When you register, we collect your email address, password (stored hashed), full name, country, language preference, and the type of Workspace you create (Influencer, Brand, or both). For Brand Workspaces we additionally collect company name and billing details. For Influencer Workspaces we collect biography, content category, gender, the social-media handles you connect, and payout details (bank or Wise account) when you choose to receive a payout.

2.2 Public social-media data

To build the marketplace catalogue we collect publicly available information from the social platforms you operate (Instagram, TikTok, YouTube, Facebook, X), including handle, follower count, engagement rate, recent post samples, and audience-distribution estimates. We use the official platform APIs where available; where they are not, we use compliant scraping limited to information visible to logged-out viewers.

2.3 Campaign & communications data

When a Campaign runs, we record the brief, the channels we deliver it on (email, WhatsApp, Telegram), the messages exchanged, the deliverables submitted, and any approvals, ratings, or disputes filed inside the Service. Campaign messages are retained as part of the campaign record so both Brand and Influencer can rely on a single source of truth.

2.4 Payment data

When you fund Escrow or receive a payout, we record the amount, currency, timing, and the payment-provider reference. Card numbers, full bank details, and similar high-sensitivity payment data are processed directly by our regulated payment partners (e.g. Wise) and are not stored on Keepface servers.

2.5 Device, log, and analytics data

When you visit the Service we collect IP address, browser type and version, device type, operating system, referrer URL, the pages you visit, and timestamps. This data is generated by your browser and by Cloudflare, our hosting and CDN provider, plus by Google Analytics 4 and Google Search Console where you have not opted out of analytics cookies.

2.6 Cookies and similar technologies

We use a small number of cookies and equivalent client-side storage: strictly-necessary cookies (session, authentication, language preference), preference cookies (workspace pinning, dark-mode), and, with your consent, analytics cookies (Google Analytics 4). You can manage your choices in your browser or, where shown, in our cookie banner. Refusing analytics cookies does not affect your access to the Service.

3. How We Use the Data

We use personal data to:

4. Lawful Bases (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we rely on:

5. How We Share Personal Data

5.1 With other users of the Service

An Influencer's public profile (name, handle, country, follower count, ER, content categories) is visible to Brands browsing the marketplace. Brand Workspace identity is visible to the Influencers it contacts. We do not sell Brand contact lists or full Influencer rosters to anyone.

5.2 With sub-processors

We work with the following service providers, each bound by a written data-processing agreement:

We review this list at least annually and notify users of material changes.

5.3 With authorities and acquirers

We may disclose personal data to comply with a binding legal request, to protect the rights, property, or safety of Keepface or others, or in connection with a merger, acquisition, financing, or sale of assets where the recipient agrees to honour this Policy.

6. International Transfers

Keepface and most of our sub-processors are based in the United States, while many users are based in the EU, UK, the Caucasus, the Gulf, and other regions. When we transfer personal data out of the EU/UK we rely on Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or another lawful transfer mechanism, plus supplementary safeguards (encryption in transit and at rest, access controls, audit logs).

7. How Long We Keep Data

8. Security

We protect personal data with TLS in transit, AES-256 encryption at rest for our managed database, role-based access controls inside the admin panel, audit logging on sensitive actions, and least-privilege secrets management. Despite our efforts, no method of transmission or storage is 100% secure; we will notify affected users and the appropriate supervisory authority of any personal-data breach as required by law.

9. Your Rights

Depending on where you live, you have the right to access, rectify, delete, restrict, or port your personal data, to object to processing based on legitimate interests, and to withdraw any consent you have given. Residents of the EU, UK, EEA, California, and other regions with equivalent laws have additional rights, including the right to lodge a complaint with their supervisory authority. To exercise any right, email info@keepface.com; we may ask you to verify your identity before responding.

Specifically for California residents, we do not "sell" personal information as that term is defined in the CCPA, and we do not share personal information for cross-context behavioural advertising. The categories of personal information we collect, the purposes of collection, and the categories of third parties with whom we share are set out in Sections 2 and 5 above.

10. Children

The Service is not directed at children under 13 (or the higher minimum age set by your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has registered, contact us and we will delete the data.

11. Changes to This Policy

We may update this Policy when our processing changes or to reflect new legal requirements. When the change is material we will notify users by email and update the "Effective" date at the top of this page. Your continued use of the Service after the effective date of an updated version means you accept it.

12. Other Keepface Apps

This Policy also applies to Keepface TikTok App, a TikTok integration operated by Keepface Global, Inc., which collects and processes user data as described above.

13. Contact

To exercise a privacy right, ask a question, or file a complaint, contact info@keepface.com or write to Keepface Global, Inc., 1145 Amarillo Avenue, Palo Alto, CA 94303, USA.